Static task
static1
Behavioral task
behavioral1
Sample
c0579ccf12541acebf2c1da272f4028268269909c5c4f7e132afcd2ac770c001.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0579ccf12541acebf2c1da272f4028268269909c5c4f7e132afcd2ac770c001.exe
Resource
win10v2004-20221111-en
General
-
Target
c0579ccf12541acebf2c1da272f4028268269909c5c4f7e132afcd2ac770c001
-
Size
208KB
-
MD5
6f47d72d38304ea5b4a14c1b983b5c8e
-
SHA1
5ff7f38f3c47897150a818f097205fbbb09d409f
-
SHA256
c0579ccf12541acebf2c1da272f4028268269909c5c4f7e132afcd2ac770c001
-
SHA512
be393e5e7d0d76c785b24385179222ccecd9535ae0509b77ab1fec783b3591b621298cc8de6666f2106bc8d559dcb915ecf61f418fc6183ddaec97db2509807e
-
SSDEEP
6144:wxO5WY4R1ydo79ta4KoGQxTZgcpi+u+0+5RH/yl:dIzEW3aYvRy3+b/yl
Malware Config
Signatures
Files
-
c0579ccf12541acebf2c1da272f4028268269909c5c4f7e132afcd2ac770c001.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE